WordPress Plugin Vulnerabilities

LC Wizard 1.2.10 - 1.3.0 - Missing Authorization to Unauthenticated Privilege Escalation

Description

The LC Wizard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check in the ghl-wizard/inc/wp_user.php file in versions 1.2.10 to 1.3.0. This makes it possible for unauthenticated attackers to create new user accounts with the administrator role when the PRO functionality is enabled.

Affects Plugins

Plugin icon
ghl-wizard
Fixed in 1.4.0

References

CVE
CVE-2025-5483
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/42dcc302-b543-42c7-99fa-605f017beb1a

Classification

Type
NO AUTHORISATION
OWASP top 10
A5: Broken Access Control
CWE
CWE-862
CVSS
8.1 (high)

Miscellaneous

Original Researcher
kr0d
Verified
No
WPVDB ID
3fbe335a-5838-4be5-aa00-00dc95510561

Timeline

Publicly Published
2025-11-06 (about 10 months ago)
Added
2025-11-06 (about 10 months ago)
Last Updated
2025-11-07 (about 10 months ago)

Other

Published
Title
Published
2026-01-05
Title
Quiz and Survey Master (QSM) < 10.3.2 - Missing Authorization to Unpublished, Private And Password-Protected Quiz Information Disclosure And Image Response Uploads
Published
2026-03-01
Title
VW Education Lite < 2.2.1 - Missing Authorization
Published
2024-04-22
Title
CookieHub < 1.1.1 - Missing Authorization
Published
2025-01-14
Title
WpTravelly < 1.8.6 - Missing Authorization
Published
2026-09-15
Title
Active Products Tables for WooCommerce < 2.1.3 - Subscriber+ Arbitrary Post Title Modification via woot_update_attachment